4.196.81.3

Neutral Activity There is no recent abuse activity, or the IP address is whitelisted.
Abuse Confidence Score
0% Low Risk
65 reports
62 reporters · latest 10 months ago
ISP
Microsoft Corporation
Usage Type
Data Center/Web Hosting/Transit
ASN
AS8075
Domain Name
microsoft.com
Country
🇦🇺 Australia
City
Sydney, New South Wales
Log in to view charts and search reports for this IP. Log In

No reports in the last 60 days

4.196.81.3 has been reported 65 times. The most recent report is from .

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Total reports
65 from 62 distinct reporters
First reported
Most recent report
Reporter IoA Timestamp (UTC) Comment Categories
Anonymous
Bad Web Bot
🇳🇱 homeshowdomain.nl
Auto-ban: 278 malicious requests on 2025-12-23 (e.g., env/backup probes, brute-force, or error bursts).
Hacking Web App Attack SSH
🇬🇧 [email protected]
...
Brute-Force SSH
🇭🇺 DumaNet
Web App Attack
🇳🇱 homeshowdomain.nl
Auto-ban: >3000 req/min op 2025-12-23
Hacking Web App Attack SSH
🇩🇪 ger-stg-sifi1
(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php
Web App Attack
🇫🇷 Lacrimosa99
Web Spam
🇺🇸 agenciahypelab.com.br
WordPress login brute-force detectado e bloqueado pelo CSF/LFD. Trigger: LF_TRIGGER
Brute-Force SSH
Anonymous
DDoS Attack
🇵🇱 lns.bz
Too many 404 requests [BY]
Web App Attack
🇬🇧 Greg Poulson
Our website was hit by this DDOS at a rate of 38 in 5 minutes.
DDoS Attack Web Spam Brute-Force
🇬🇧 venus.launch.bz
(wpscan) WordPress probe detected from 4.196.81.3 (AU/Australia/-)
Hacking
🇬🇧 ISPLtd
4.196.81.3 - - [23/Dec/2025:09:21:58 -0400] "GET /wp-content/plugins/hellopress/wp_filemanager.php 4.196.81.3 - - [23/Dec/2025:09:21:59 -0400] "GET /wp-content/plugins/hellopress/wp_filemanager.php ...
Hacking Web App Attack
🇷🇴 INTEQ
Web attack from 4.196.81.3
Web App Attack
Anonymous
Fuzzing/Looking for credentials files.
Brute-Force Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 172.86.85.110
🇺🇸 54.152.242.84
🇸🇪 192.36.226.103
🇿🇲 155.0.140.87
🇦🇷 181.20.73.86
🇺🇸 172.104.11.46
🇰🇪 154.159.252.109
🇸🇬 152.42.233.209
🇺🇦 93.171.247.171
🇩🇪 78.46.193.134
🇺🇸 66.132.159.123
🇺🇸 54.235.140.118
🇧🇷 45.187.87.39
🇷🇴 193.46.255.86
🇮🇳 182.237.13.208
🇪🇸 79.153.177.20
🇳🇱 195.178.110.26
🇦🇷 181.99.150.186
🇺🇸 174.68.45.134
🇨🇴 149.78.171.18
feedback